1. INTRODUCTION

BYRED (“we,” “us,” “our,” or “Company”) operates the website www.byred.cy (the “Website”). We are committed to protecting your privacy and ensuring transparency regarding how we collect, process, and protect your personal data.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under applicable law. This policy applies to all visitors and customers who access our Website or purchase products from us.

Our Privacy Policy complies with the EU General Data Protection Regulation (GDPR) (EU) 2016/679, Cyprus Data Protection Law (Law 112/2004), the ePrivacy Directive (2002/58/EC), and Cyprus Consumer Protection Laws.

2. COMPANY INFORMATION

BYRED is located in Nicosia, Cyprus. You can contact us at info@byred.cy or by phone at +357 70 007882. We do not maintain a dedicated Data Protection Officer, as we process only essential customer data necessary for order fulfilment, payment processing, and shipping.

3. WHAT PERSONAL DATA WE COLLECT

We collect minimal personal data necessary for processing your order and delivering it to you.

3.1 Data You Provide Directly

When you place an order or contact us, we collect your name, email address, and phone number. If you create an account, we also collect your password. We collect your delivery address for shipping purposes and your payment method details, which are processed securely by our payment processor, JCC. We also collect any messages or inquiries you send us through our contact forms, as well as information about products you order.

3.2 Data Collected Automatically

When you visit our Website, we automatically collect certain technical data, including your IP address, browser type, operating system, and device type. We also collect usage data about which pages you visit, how long you spend on them, and which links you click. We may collect general geographic location information (country or city level, not precise location).

3.3 Data from Third Parties

We receive personal data from our service providers. JCC provides payment confirmation and transaction details. Kronos Express provides delivery status and tracking information. BYRED personnel may collect your contact information to coordinate in-house delivery.

4. WHY WE COLLECT DATA & HOW WE USE IT

We process your personal data for several lawful purposes. We collect and use your data to process your orders, which is a contractual obligation. We use your payment information to complete payment transactions through JCC. We use your delivery address and phone number to arrange delivery of your products. We collect your contact information to provide customer support and send you transactional emails such as order confirmations, shipping updates, and receipts.

We are legally required to process your transaction data for tax compliance and accounting purposes. We use technical and usage data to improve our Website’s functionality and user experience. We also use your IP address and transaction patterns to prevent fraud and enhance security.

We do not use your data for marketing, profiling, automated decision-making, or any other purpose without your explicit consent. If we wish to send you promotional emails or marketing communications in the future, we will obtain your prior consent and provide you with a clear way to opt out.

5. WHO WE SHARE YOUR DATA WITH

We share your personal data only with the following recipients who have committed to protecting it.

5.1 Service Providers (Data Processors)

JCC, our payment processor, receives your payment information to process transactions and prevent fraud. Kronos Express receives your name, phone number, and delivery address to deliver parcels and provide tracking services. BYRED personnel may receive your name, phone number, and delivery address to coordinate in-house delivery.

All service providers have signed Data Processing Agreements ensuring they process data only as instructed by BYRED, implement appropriate security measures, do not use data for their own purposes, and delete or return data after service completion.

5.2 Legal Authorities

We may disclose your data if required by law, including to tax authorities for tax compliance, to law enforcement upon legal request, court order, or warrant, and to courts if legally compelled.

5.3 No Sale of Data

We do not sell your personal data to third parties for marketing, advertising, or any other commercial purpose.

6. DATA RETENTION

We retain your personal data only as long as necessary for the stated purposes. We retain order and payment data for six years to comply with Cyprus tax and accounting law requirements. Delivery addresses and phone numbers are retained for three years to handle disputes and provide customer service. Account information is retained for the duration of your account plus 12 months after closure for compliance and account recovery purposes. Communication records are retained for three years for legal protection and dispute resolution. Technical and IP data are retained on a session basis or up to 12 months for website security and fraud prevention.

After the retention period expires, data is securely deleted or anonymised.

7. DATA SECURITY

We implement industry-standard security measures to protect your personal data. All data transmitted to our Website is encrypted using SSL/TLS encryption (HTTPS). Your payment data is processed through JCC’s secure, PCI-DSS-compliant gateway. Only authorised BYRED personnel can access customer data. We store data on secure servers with restricted physical and digital access. We periodically review our security practices to ensure they remain effective.

You are responsible for keeping your account password confidential and secure. While we implement strong protections, no online system is 100% secure. We cannot guarantee absolute security, but we commit to protecting your data to the highest practical standard.

8. YOUR RIGHTS

Under GDPR and Cypriot law, you have several important rights. You have the right to access a copy of your personal data by contacting us. You have the right to correct any inaccurate or incomplete data. You have the right to request deletion of your data (the “right to be forgotten”). You can request that we limit how we process your data. You have the right to receive your data in a portable, machine-readable format (data portability). You can object to the processing of your data.

To submit a data subject request, send an email to info@byred.cy with the subject line “Data Subject Request.” Include your name, email, account details, and a description of your request. We will respond within 30 days of receiving your request (this may be extended by 60 days for complex requests). We may request proof of identity to verify your request.

If you have given consent for any processing, such as future marketing, you can withdraw it at any time by contacting us at info@byred.cy.

If you believe your data rights have been violated, you have the right to lodge a complaint with the Cyprus Commissioner of Data Protection (commissioner@dataprotection.gov.cy, www.dataprotection.gov.cy, +357 22 818 456, 1 Iasonos Street, 1082 Nicosia, Cyprus).

9. CHILDREN’S PRIVACY

Our Website and services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data without parental consent, we will delete it immediately. If you believe this has occurred, please contact us at info@byred.cy immediately.

10. INTERNATIONAL DATA TRANSFERS

BYRED operates exclusively within Cyprus. All personal data is processed within Cyprus and is not transferred outside the EU/EEA. Therefore, no international data transfers occur under this policy.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our business practices, changes in applicable laws, or technological developments. We will notify you of material changes by posting the updated policy on our Website, updating the “Last Updated” date at the top of this document, and sending an email notification for significant changes. Your continued use of the Website after updates constitutes acceptance of the revised policy.

12. CONTACT US

For privacy questions, data requests, or complaints, contact BYRED in Nicosia, Cyprus. You can reach us by email at info@byred.cy or by phone at +357 70 007882. You can also visit our website at www.byred.cy.

Last Updated: January 2026